TI-2023-23883 CVE-2023-44373 · GHSA-86gv-6g4q-x856
Injection in Siemens RUGGEDCOM RM1224 LTE EU
Priority MEDIUM 43
Affected devices do not properly sanitize an input field.
Siemens
Records2488All Threatist records
Exploited (KEV)37In CISA KEV
CVSS critical333CVSS 9.0–10.0
CVSS high1406CVSS 7.0–8.9
Exploited now
Siemens records in CISA KEVTI-2026-34021 Linux Kernel Missing Initialization of a Variable Vulnerability TI-2026-79288 Google Brotli Unchecked Return Value Vulnerability TI-2026-78793 PHP Memory Corruption Vulnerability TI-2026-78794 PHP Stale Internal Request-State Vulnerability TI-2026-74782 Siemens Software Center Uncontrolled Search Path Element Vulnerability TI-2025-38067 Fortinet Multiple Products Path Traversal Vulnerability
Components
Products in the NVD configurations · select one to filter the recordsRecords
8 records in 6ag1206-2bb00-7ac2 Firmware · all components
TI-2022-13660 CVE-2022-31765 · GHSA-33vv-h74c-xmw5
Missing authorization in Siemens RUGGEDCOM RM1224 LTE EU
Priority MEDIUM 42
Affected devices do not properly authorize the change password function of the web interface.
TI-2023-23884 CVE-2023-44374 · GHSA-88q8-78jp-fcv6
A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2)…
Priority MEDIUM 40
A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V8.0), RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2) (All versions < V8.0), SCALANCE M804PB (6GK5804-0AP00-2AA2)…
TI-2023-23835 CVE-2023-44318 · GHSA-xhv6-jc84-h9c6
Affected devices use a hardcoded key to obfuscate the configuration backup that an…
Priority MEDIUM 40
Affected devices use a hardcoded key to obfuscate the configuration backup that an administrator can export from the device.
TI-2023-23836 CVE-2023-44319 · GHSA-mq9c-j62j-h6cj
A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2)…
Priority LOW 31
A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V8.0), RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2) (All versions < V8.0), SCALANCE M804PB (6GK5804-0AP00-2AA2)…
TI-2023-23839 CVE-2023-44322 · GHSA-mmpc-c8w6-wrm6
A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2)…
Priority LOW 28
A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V8.0), RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2) (All versions < V8.0), SCALANCE M804PB (6GK5804-0AP00-2AA2)…
TI-2023-23837 CVE-2023-44320 · GHSA-282g-wxjw-75vj
A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2)…
Priority LOW 27
A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V7.2.2), RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2) (All versions < V7.2.2), SCALANCE M804PB (6GK5804-0AP00-2…
TI-2023-23838 CVE-2023-44321 · GHSA-w4f6-7r85-9m86
Uncontrolled resource consumption in Siemens RUGGEDCOM RM1224 LTE EU
Priority LOW 25
Affected devices do not properly validate the length of inputs when performing certain configuration changes in the web interface allowing an authenticated attacker to cause a denial of service condition.